Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/631a42b2-f40b-393d-88aa-15fb4250b640.roa
File:                     631a42b2-f40b-393d-88aa-15fb4250b640.roa (raw, json)
Hash identifier:          nsPw40h3Cwk3w9Xf7sf3B9SDRn55MWj+qgyaq6s6J+Y=
Subject key identifier:   02:02:3C:51:27:F1:CF:3F:FB:58:B8:B7:E8:F6:93:D1:99:68:74:0D
Certificate issuer:       /CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
Certificate serial:       010D0C9F4328584F331D10BB961C0C9C93E61DE0
Authority key identifier: E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/631a42b2-f40b-393d-88aa-15fb4250b640.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     834
IP address blocks:        199.235.7.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:10:bb:96:1c:0c:9c:93:e6:1d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d0ff7c-48cb-43c1-a72c-6b23ed3137c9
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=f7780319-9443-4fa8-b544-97485fb0fd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:44:20:e2:b3:16:0e:79:ce:1b:f9:86:17:13:
                    24:74:85:30:a9:02:fc:6e:2b:02:86:df:0d:10:42:
                    66:9f:91:cc:f3:61:78:4c:84:53:ef:53:e1:15:a8:
                    a2:a2:4f:dc:ad:da:fa:9c:0d:dc:09:39:18:ee:77:
                    c8:a9:83:87:82:33:b6:1e:c7:6e:0d:42:98:93:32:
                    8a:49:f5:3f:db:8c:77:84:6d:03:13:6b:51:f8:f5:
                    c4:85:d0:21:62:6a:ae:68:f7:9b:7b:b7:87:f0:90:
                    9d:cb:ff:53:21:62:84:8c:51:b8:aa:cb:18:df:2d:
                    f5:cf:84:24:09:25:93:28:a6:45:a5:f8:1c:76:db:
                    43:4d:89:04:c5:6a:d1:22:d7:39:7d:75:92:0d:31:
                    e7:12:c5:69:ca:2e:0f:26:ca:0a:87:93:11:40:a4:
                    f6:32:ce:24:75:b9:6e:4c:af:55:06:5b:e0:90:cc:
                    0b:88:40:42:1f:7f:36:74:b0:67:c0:32:bb:68:89:
                    c0:7a:10:b5:b6:ec:3b:79:29:df:16:18:46:63:9d:
                    7b:6b:55:0d:96:2f:80:b1:b1:9f:79:b5:ee:7a:88:
                    ee:39:07:fd:99:46:17:7f:ea:f5:eb:f9:67:8f:fa:
                    55:17:8f:b5:94:27:cd:d4:1e:2e:8e:3d:f3:36:cc:
                    48:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:02:3C:51:27:F1:CF:3F:FB:58:B8:B7:E8:F6:93:D1:99:68:74:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/631a42b2-f40b-393d-88aa-15fb4250b640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.crl

            X509v3 Authority Key Identifier:
                keyid:E6:BC:B3:98:E8:24:6B:29:0C:B0:45:6B:45:2A:48:22:11:53:D6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/50d0ff7c-48cb-43c1-a72c-6b23ed3137c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.235.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:fd:c9:6a:9a:8b:db:eb:d3:7d:14:30:de:06:10:a5:c2:e9:
         ab:fa:37:23:64:b5:c9:70:56:50:7b:d2:2a:b8:30:7d:82:ac:
         ff:56:5f:04:69:77:db:ae:15:2d:61:8d:31:0e:1d:28:8f:f8:
         c3:70:e5:fc:13:19:6e:61:aa:61:0e:bd:ef:fc:4a:d2:ed:f4:
         74:e5:a4:1c:58:9c:ed:66:95:42:c1:2d:14:c4:2e:15:2d:47:
         2f:ea:1a:e9:35:2d:83:23:b1:f5:3f:79:23:12:85:52:75:e1:
         14:1b:7a:8c:d1:39:4d:a6:52:c6:84:c3:45:cc:da:74:45:08:
         5f:34:1c:7f:5f:fc:22:e3:14:09:1f:f6:b7:b0:98:84:a7:63:
         01:0b:93:6c:ae:02:48:50:a1:31:27:04:28:1d:0d:e6:39:00:
         c3:d3:32:9b:85:79:5f:a9:89:fd:ce:df:fd:65:c4:22:90:51:
         27:6f:36:ec:00:63:f0:6d:7f:87:67:99:c4:99:51:9e:c6:36:
         9a:4d:2e:eb:93:43:46:74:49:0a:2f:c2:c4:92:ce:68:aa:28:
         4f:5f:94:08:90:c7:4b:28:b8:ba:88:4d:a2:53:c9:c7:b5:f5:
         1e:07:2e:c7:ac:0c:20:f9:1e:3a:55:22:83:d3:01:b7:dd:28:
         26:3c:10:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----